{"report_id":"c609f7c6-b167-4493-96cc-71897a42f977","version":0,"status":"done","tags":[],"date":"2026-07-22T21:50:32Z","url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":0,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"title":"Discovery Call","dom":{"size":15441,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2381)","md5":"723ca7c5bb6dccf7d825c29f89fbe04d","sha1":"e6c91bd5fdc512199acd45f2ac5bb6b9cade6bbd","sha256":"a61e5063000c8f069de763552ca9d825cca72070ae5a90459137b5cd25310430","sha512":"24a7ff5f4c900733821d4f5bd8f6410c0a42a2410b94702435823d15654a7cad1c1d3513da3766f180d7299c90ff4e09b4fb78136231ef83fb50d27504ec49cb","ssdeep":"192:TSYBWME7uuf757kOT9NDsBQmio9NsVgglfzGc1XvGwTO:TLBWME7uqV9+FSrGc116","tlshash":"7862306251a8693f510342ceb066bb3e3689d207dd0d1118b9be1bf84fdbd85fc1b968","dom_hash":"domhashe02de09eb9d9dfc37610bd8cd2b9b23e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":0,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T21:50:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"stage3.wpengine-bestbidestimating.com","ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":54,"request_count":27,"received_data":249917,"sent_data":13622,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"bestbidestimating.com","ip":{"addr":"148.72.81.91","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"domain_registered":"2009-09-09","domain_rank":3287775,"first_seen":"2014-10-27T21:57:51Z","last_seen":"2024-09-22T02:15:18Z","alert_count":0,"request_count":1,"received_data":1453,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/config.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c48768ed1cc0cbd72750512d0d637f5a","sha1":"f757397cf64970db3d7240b9b6532b8087ff47ba","sha256":"e760650c873fb2398bfb6477e5daf82e68766c378802a46a3e655386ff2dcf20","sha512":"77ddfa03cfa2ef92abba76d80b3c27010594a82d97bcb3fe30cbdef6ee3f9cff739aeaa0dccd5693d33ed68905b7ab6f8451a6a5f52a25b28a664124200babc0","ssdeep":"","tlshash":"47a002e650792eb784f588b826862689b66957e02c07bdb101890e2831d9857a1e64ca","size":59,"data":"","first_seen":"2026-07-06T18:50:50.315115Z","last_seen":"2026-07-22T22:24:25.553466Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/app-config.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdf8a7afd1aa8583841bff21821c1b27","sha1":"2f850cbc97229e799d31e483519cad0551253288","sha256":"f05dd93611aaa3d2313dfd8d49b03216dea29631b0025e9c5d6241be8e59e78f","sha512":"47dee89cb3debc2a6a0477b91193106740841c9fd71ddbbc5b526ee73f9cd20830e0fe4813e730334503ad8f3d9152358812bbe6dca46d44c36470730532f3bf","ssdeep":"","tlshash":"ba3141e3c430c4a591b267761757b05a9a3107838d897cb6b75e0f141f8ca1d30b2672","size":1636,"data":"","first_seen":"2026-07-22T21:46:10.718433Z","last_seen":"2026-07-22T22:24:25.527836Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/metrics.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f399ba9cb60b163963d3fae5f327d18c","sha1":"0c0ad029e071cf0b60f5814a26b8a9b5271e9586","sha256":"dde07a408391d40768fe0f34efa56d3a2513a3312af42a00d859d52c114a5682","sha512":"5046821f8f8c1ceea0acb18bc7b91986cc1093fb7b08bef23b0cf11bd77d56f2755a128614b7ca3c9312b9f92cdc9ab6d12ef0eb479ba12d86739b1a479ad602","ssdeep":"","tlshash":"c911c05ac0f6713259e7a15d9b9b844121274c872c4fb880bf9c47901f8915d9d71a8c","size":934,"data":"","first_seen":"2026-07-06T18:50:50.340655Z","last_seen":"2026-07-22T22:24:25.563811Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/auth.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"34f89d76b0b55b61704505917139985d","sha1":"8cbb3407fde3d689071d7b5c2ddd3efa84591cdd","sha256":"e10a12f5487f2a2f5166cb9aa3ce882e404f74654cb129583c04f46df15f9103","sha512":"db2815b38f60af20c440940aa0e375d4906d8d5745621fa366dc562a84a07f95811dcbc52bf9f61b4ec2d0fd8906bb6a1312d22857c197b14d9002e9c33a26fd","ssdeep":"192:sPoREfCQ67sfixeuyAPs7ywwUwJNuWQSnGcv46/FKaTwF1EmqGcu/Gc8imAmrDjJ:swREI0eJN1BUc","tlshash":"7cf1410a9477223eda7710b61fcb14462372454b2409ce91f6ed43452fc8e2ebe67be8","size":7603,"data":"","first_seen":"2026-07-06T18:50:50.298132Z","last_seen":"2026-07-22T22:24:25.545414Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/booked.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"442a4bc52ba58c97e2b3ed66df72bd51","sha1":"e270664899c684cca22cef15ec43464f455d5801","sha256":"d105e8385b82486dadd5c525815cbed0aff54b097bfcb137b8401ef3eed7791f","sha512":"f6468c1b362c99e4dfe2976167c61da815c47043d7e9ab1537a5cb95c34b0bced098d5c5257d4a2e989c5b48ff0010f3ab0aa8b9a28bc8cd20957c1f7026c3cc","ssdeep":"","tlshash":"7821001a246f0a28ef7300b29fc71e88833306274146e51df68b69912f83e285a7f188","size":1136,"data":"","first_seen":"2026-07-06T18:50:50.300334Z","last_seen":"2026-07-22T22:24:25.559844Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/storage.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceffb82fc2eada8b56534d7fc1172977","sha1":"a14500663263f4215eaf1762c33fdc04929a11e3","sha256":"5c4f3c3340caf8606535c008a29c4eac730d4633dc2e37bc100815ff1adcf719","sha512":"c858a6212fc39d92915c59c453b8d28e8be5aaa00436bdc439d6e85d62cb88b22ce9f3c45de08305a8dd0e2da8f8dccf2de6818434daa878c1f3ad953c0b6c18","ssdeep":"","tlshash":"3a51cc4e70e7223ca33260ae4edf459551775e0b3217ca91f9de02023fc453c69a67aa","size":2675,"data":"","first_seen":"2026-07-06T18:50:50.258569Z","last_seen":"2026-07-22T22:24:25.532163Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/namespace.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3ee4665f7023a9246272a7b4e410fd7","sha1":"8b3ac2736a3c1b91be368d70c4353d1d572203d3","sha256":"e5f3a3973e94f1d360eab69fdcddf72e298ded6eac36b7ecb817cbad9a68114c","sha512":"6563aa7c7efda2f36f7901fd0e15b5bdc9520d3718f4c3c988ee9117d84322f35c7ad2129591ff6586eebb024f267ab06e3be2351ba18062c5979ad6ccba178b","ssdeep":"","tlshash":"dca002fcb42970ff836518a9fec27e68729502a0c3a65c114f482e7830d544ba1701d4","size":70,"data":"","first_seen":"2026-07-06T18:50:50.289883Z","last_seen":"2026-07-22T22:24:25.526025Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/dates.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7142230af3d67038772771d5acbfeb6a","sha1":"77d4aab2cc72bcf831041133f6e9f3515cd8db27","sha256":"9ee27cad6a49d49855276bdd84fb4be1b184e633633beba323c1f3fd1edd4c37","sha512":"f336ae3d78c4b47a2aa90a24c40bc29208f97cca7db5a47745c20dc99dc6790f5aacaf6693188d2856646be69314bdefcc12390e87855928d3392c2ad2a81b48","ssdeep":"","tlshash":"6e51ae49b5f23048d763b2e8478f94016565a82f7c4a9959ba9cd2102f86c3cc2bffcc","size":2482,"data":"","first_seen":"2026-07-06T18:50:50.269812Z","last_seen":"2026-07-22T22:24:25.542021Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/cache.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d42680c35696e9aa53949fb4e41ecaf","sha1":"8684bb427fc9e798f18c3d3fb9926e875c0137f4","sha256":"8467196b02fe3bad30f2dddb610acd507ad8c134392522bf59bc84518c631fae","sha512":"e16e555662607c7f2e61d17243da2a50b3b1d48bf88afd86cb7d9244d3d8bf39b07d70a61baaa238df8267304768e2b4b092f0b8d3cad042c1abddb00e31209a","ssdeep":"","tlshash":"f4118c5976fb31194272b0bc0bdf40456525d143a60eef50ba9e83023f9853ca766b5d","size":893,"data":"","first_seen":"2026-07-06T18:50:50.322536Z","last_seen":"2026-07-22T22:24:25.558981Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/schedule.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd7236e147ec23274ce3971edfc90fe8","sha1":"9e4b2bbe15bd21967215c49e1869147d7e480fed","sha256":"54fa33d3f07052a6ca5719100ef01b9a6da9eabe6028878ee3e696e90b6fa93c","sha512":"68d3147ee5254d3de05fb54801067b803a00227308b491af19a634558fd14530256e23f70a7746d17098c0e079eec2d5bed7a696c4722e548ebd1097cbb53ffe","ssdeep":"","tlshash":"9d71cf5e24f73226db63a07d0adb41aab276880b141acb08fdbd51413fc553cc66f668","size":3798,"data":"","first_seen":"2026-07-06T18:50:50.272932Z","last_seen":"2026-07-22T22:24:25.56615Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/info.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b863247c220816ae01ba2d4ba08d1bc","sha1":"b3655bd73cca7cebc38621f3340c7c3f84ed4427","sha256":"0cba3b209a2d2e68308b2e57533d23256b19be6647bada8e2fbac9a7ff26c074","sha512":"52420951fcefe6107dd64ec02a3014791720185f20e781adfe782a47d8f15687fbe37772b2ed34318bb0949d4405e88a8da5fa48aa4efb688edb94254321d3fb","ssdeep":"","tlshash":"1ef0b4efcd7aa23379731ea60ae76a5c1a31077f4149c600bb2692440ea66113c135bc","size":512,"data":"","first_seen":"2026-07-06T18:50:50.30649Z","last_seen":"2026-07-22T22:24:25.561688Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/main.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"77ffa5facd8833bcfd7f2dd0e6be9af7","sha1":"8d172f64d5e3e42d7c0950da786d57e1df3c7397","sha256":"6de5f1038aa3343463fbdd2540c78d33a962d9e4e8e77b832b88d49ee85176a5","sha512":"5727da06e97df1a14e52e7d48e0925938d4a8ddd32d3785e742a3dd273e9aadee60423f39a6362d408592b942bce618980c5f794334e1f5886d6becf188768d5","ssdeep":"96:qWNJL+x9WC98jANChzANF8f2TO7LoJOKZ4GdG8b1m7GfL/It82sia:qWNJu3ajZauoJ99L/It8Sa","tlshash":"02b1fd5b9afb12389577503a57cf6d5822370aa71109ce10feaf9e842f80c6814fb3d4","size":5097,"data":"","first_seen":"2026-07-06T18:50:50.308245Z","last_seen":"2026-07-22T22:24:25.546618Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/api.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"85db59f20682524c860166cfcf3c4bd9","sha1":"d4a2e810787df8604e89e2e6953a58558422cee0","sha256":"19b9e52f165387c613feb250002f2d9825995464c5c2bc1a1c180243e063f320","sha512":"0b89a7fc1b95ed71be834801988234622c3f02843120d3468c3a6db53518a2bac55a9670ab5b35c31f73fc50e7d6734461aa1257e1e0dd108537f156d03f0070","ssdeep":"","tlshash":"6331cfcd74e3b05d43a231ad1acf6018f42ae852150fd991f96d82a07f5083da677b8c","size":1689,"data":"","first_seen":"2026-07-06T18:50:50.304895Z","last_seen":"2026-07-22T22:24:25.536723Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/calendar.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"065ddcf3595dfee645c05643d499ebc3","sha1":"02e88bf24aba6cbd5aa21d240f76dc0b5a9c1aea","sha256":"0254b887cc453d69fc73c4ead9791d4aa5f45cd06167c049f3f8d70a3f70ec99","sha512":"a085a10444cbba098b569451066e783f58bc3352b0de6bcce0d1d0cec4171b2dd70abe2edbce6e4d1307e3f70c4d4c7c7376fd15780b439619d918f6a2f498af","ssdeep":"","tlshash":"7641e0074d3b3221a533a0adcba75e50626615233406c6a9be8eeb481fca530c4af5ec","size":1901,"data":"","first_seen":"2026-07-06T18:50:50.280675Z","last_seen":"2026-07-22T22:24:25.547727Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/timezone.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"422c285cea8394b0fe9e87459cceda05","sha1":"4eeb0799a4fbf42a162d1076a6b8cc37d1418204","sha256":"5326b8a8a3b60e9e082f09e9fa23545d88ffdb1f9713e681276a1b012f40559c","sha512":"269f30176d0f478a034d133acf691d8c5f3f41bc33b2658e99251ec9e572f023e5359adfae6ce15a351c6923a457869366a036c8a2e8ff2fb71ef3efb3d7c021","ssdeep":"","tlshash":"2c5192ab5e77333188bb64a45bcfb9042a330a33210ae964fd9f4ac40fc755128e65d5","size":2672,"data":"","first_seen":"2026-07-06T18:50:50.28709Z","last_seen":"2026-07-22T22:24:25.567203Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/branding.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"aacbbc5773b6280d84a27ffb66639b1d","sha1":"55811ffe4f6917aa65908728fecac1c393e2fad6","sha256":"ecfbd145532ef96cdd65b1ade8641f927440e2f536fdf1a9c75bcc64f987080c","sha512":"0a927f5489e5c2709e29ecde306baeb8f12aa2ddf866e66078722ca7c7845cd00bb0e043c506d4b5a993a17c9e4115880498fe7d73e23bef2b23e9cfa3a1c12f","ssdeep":"","tlshash":"86519aec58e3b029436320fcd79fa258b43a85037a49de857d4d4310af6593ac9a27dc","size":2728,"data":"","first_seen":"2026-07-06T18:50:50.335322Z","last_seen":"2026-07-22T22:24:25.555155Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/dom.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9d107575cb1d8136d25d18305a28685","sha1":"0460187aad0a2d40d9dafdf4de0d409b4e779491","sha256":"a6bb40ca2db79bc302eb43b89b231966c54e3daa50f2e547796b8773a395fc05","sha512":"4495bda58872030ca1faca5ae181cd602f4be144c29022bb8196cefbd2ba27a4a2838eb74fa34dd542954c88ecbf0568a792bdf2c20d93ae13e09807a2ef543b","ssdeep":"","tlshash":"5df0a26f38a3303e412140be6fdb781c7f281521d4019a1a7e4c3a562ed1d6dc3b295c","size":596,"data":"","first_seen":"2026-07-06T18:50:50.236335Z","last_seen":"2026-07-22T22:24:25.564985Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/slots.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1f9bbb88891e2903028c0d46e3bcd1d","sha1":"22038a442d524e6f9ac59e82c0f049386319d62d","sha256":"6d501472caf60d30200a6d27c79bffc59881daa9dee05a0745118aa75f45755a","sha512":"b72380cd9ae3115796a94b5d6411a3dba28e235bdce8216f00e7fb49c0b0a2b0e80c1ba254bbbb9ad0e99233f8fd78b6d391dfee1f9169adfbcad5edc8e4b657","ssdeep":"","tlshash":"e7418b8b29bb2b3a9673507d47cb086610336d176609de05bb4f93042fc543c8ca67c8","size":2175,"data":"","first_seen":"2026-07-06T18:50:50.277467Z","last_seen":"2026-07-22T22:24:25.554368Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/times.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6732fda0c6eaebd67d94f4349100e10","sha1":"8bb4ff203688aeda66ece0014b7f456b8c0509e4","sha256":"1d12064ba5aa2ae303bd97944ef664e5dbf3f8bc4d1fd68f033923e685a67758","sha512":"b551255b71e6fd2314fc046ddc95f30e5256ce2bf0c4e3b61b87447c92f9b84696331c82954dc0d1a634bb9d2d5d5691ae2be93af752139022fd2dc68e279604","ssdeep":"","tlshash":"1121238e65bb217a5477006b43db48e1d71a85071807c250fedd86482f80e3ae8dff99","size":1387,"data":"","first_seen":"2026-07-06T18:50:50.32517Z","last_seen":"2026-07-22T22:24:25.543803Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/modal.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3b9ca1beb25c625038b1b5518faac14","sha1":"125f9b81f143b25996a48e2ce13caba95f8fcb28","sha256":"28f23f01ba85145d22180622d6a480afb94f370bd1f7e3b37e2ea249c003e64e","sha512":"86442a648c8a15ea5356fe4a0d3cc404daf51e35d2a144987f10ccc7b78dd810ce1c016eab67d78ef6784d4f94404b67029e75aa7205b267715d18e852fd92fe","ssdeep":"","tlshash":"1261435b29bf2226de3304768fc71999133748176009c5b0ffeb81912fc2a04ad7798c","size":3211,"data":"","first_seen":"2026-07-06T18:50:50.245054Z","last_seen":"2026-07-22T22:24:25.529327Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[calendly-booking]app version10","filename":"https://stage3.wpengine-bestbidestimating.com/calendly/assets/js/dom.js","line_number":18,"column_number":13},{"level":"log","text":"[calendly-booking]server cleanup detected, clearing local storage","filename":"https://stage3.wpengine-bestbidestimating.com/calendly/assets/js/dom.js","line_number":18,"column_number":13},{"level":"log","text":"[calendly-booking]fetching slots/calendly/api/slots?start=2026-07-22\u0026end=2026-09-20","filename":"https://stage3.wpengine-bestbidestimating.com/calendly/assets/js/dom.js","line_number":18,"column_number":13},{"level":"log","text":"[calendly-booking]slots loaded672","filename":"https://stage3.wpengine-bestbidestimating.com/calendly/assets/js/dom.js","line_number":18,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/timezone.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.884Z","timestamp":1784757004884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/timezone.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2672\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-a70\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2672,"size_decoded":2925,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"422c285cea8394b0fe9e87459cceda05","sha1":"4eeb0799a4fbf42a162d1076a6b8cc37d1418204","sha256":"5326b8a8a3b60e9e082f09e9fa23545d88ffdb1f9713e681276a1b012f40559c","sha512":"269f30176d0f478a034d133acf691d8c5f3f41bc33b2658e99251ec9e572f023e5359adfae6ce15a351c6923a457869366a036c8a2e8ff2fb71ef3efb3d7c021","ssdeep":"","tlshash":"2c5192ab5e77333188bb64a45bcfb9042a330a33210ae964fd9f4ac40fc755128e65d5","first_seen":"2026-07-06T18:50:50.28709Z","last_seen":"2026-07-22T22:24:25.567203Z","times_seen":6,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/booked.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.895Z","timestamp":1784757004895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/booked.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1136\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-470\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1136,"size_decoded":1389,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"442a4bc52ba58c97e2b3ed66df72bd51","sha1":"e270664899c684cca22cef15ec43464f455d5801","sha256":"d105e8385b82486dadd5c525815cbed0aff54b097bfcb137b8401ef3eed7791f","sha512":"f6468c1b362c99e4dfe2976167c61da815c47043d7e9ab1537a5cb95c34b0bced098d5c5257d4a2e989c5b48ff0010f3ab0aa8b9a28bc8cd20957c1f7026c3cc","ssdeep":"","tlshash":"7821001a246f0a28ef7300b29fc71e88833306274146e51df68b69912f83e285a7f188","first_seen":"2026-07-06T18:50:50.300334Z","last_seen":"2026-07-22T22:24:25.559844Z","times_seen":6,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bestbidestimating.com/favicon.ico","fqdn":"bestbidestimating.com","domain":"bestbidestimating.com","tld":"com"},"ip":{"addr":"148.72.81.91","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:05.284Z","timestamp":1784757005284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bestbidestimating.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 01:01:14 GMT","end":"Sun, 23 Aug 2026 01:01:13 GMT"},"fingerprint":{"sha1":"0B:98:50:28:46:8C:97:75:46:E8:9B:13:A9:0B:C5:19:66:D7:F4:FD","sha256":"0E:4F:79:C0:30:DA:71:FA:AF:A1:FA:09:15:0D:CC:50:D0:BE:33:A6:D6:9E:1E:2F:86:23:C4:DA:A5:F0:D5:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 13 Aug 2019 21:58:35 GMT\r\netag: \"2b00453-47e-59006bdf978c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 243\r\ncontent-type: image/x-icon\r\ndate: Wed, 22 Jul 2026 21:50:06 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1150,"size_decoded":546,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"9e541b569fd237400b06c7b964204f13","sha1":"a52f9495831e15d9edfc1af10998cef464c9219e","sha256":"944ca1884baaca3eb92e6a92fc7ab0bec997f2e052384c2a4b515f33a63180b5","sha512":"650039b161a4f3dfe73faf9615b6b1a8e745966d25a707d56a7351cb194af946004670711411f6b84178c70e47dcab8391bb25a6102b32e08a413cb7cb200ed3","ssdeep":"","tlshash":"ba211de133ae2be0f8050df92056e505ee5f6c575a95042bbed46432793736800513be","first_seen":"2026-06-10T17:13:09.257197Z","last_seen":"2026-07-22T21:50:36.731075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":42,"connect":155,"send":0,"wait":168,"receive":0,"ssl":466},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T21:50:04.566Z","timestamp":1784757004566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/ HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 03 Jul 2026 02:08:35 GMT\r\netag: W/\"6a4719a3-2e40\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":11840,"size_decoded":3748,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"192a65b139d406f7cc2f0787bb2d5738","sha1":"623978dfd111ed9f8a61612be21ef362a9083adc","sha256":"bdbd3b4f4e18548c781387d6519f50393db2a28bd63635c637e5ccb40dc54962","sha512":"118370f61baf552bd9b9ca4b94740b835e1bf743eedc79593dc51488ee565f079defe6b677ce8bddd0054d0e42a92ef798c5820f2609686a609e780c159f15cb","ssdeep":"96:KqX/MlvScYnhGmdG3FHYc8stwyucmxpGUumICdOMUk0lzh8e++d8jOmy+ld8ji+t:KqX/Mlf1CT/iU1ORoTxr8Dr5","tlshash":"8b3243665af4807ed41344e6ba55771e3b06f253970a5208b9ff0ef40fc7989ec274a8","first_seen":"2026-07-06T18:50:50.302387Z","last_seen":"2026-07-22T22:24:25.540285Z","times_seen":6,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/config.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.857Z","timestamp":1784757004857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/config.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 59\r\nlast-modified: Fri, 03 Jul 2026 02:08:31 GMT\r\netag: \"6a47199f-3b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":59,"size_decoded":309,"mime_type":"application/javascript","magic":"ASCII text","md5":"c48768ed1cc0cbd72750512d0d637f5a","sha1":"f757397cf64970db3d7240b9b6532b8087ff47ba","sha256":"e760650c873fb2398bfb6477e5daf82e68766c378802a46a3e655386ff2dcf20","sha512":"77ddfa03cfa2ef92abba76d80b3c27010594a82d97bcb3fe30cbdef6ee3f9cff739aeaa0dccd5693d33ed68905b7ab6f8451a6a5f52a25b28a664124200babc0","ssdeep":"","tlshash":"47a002e650792eb784f588b826862689b66957e02c07bdb101890e2831d9857a1e64ca","first_seen":"2026-07-06T18:50:50.315115Z","last_seen":"2026-07-22T22:24:25.553466Z","times_seen":6,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/dates.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.868Z","timestamp":1784757004868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/dates.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2482\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-9b2\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2482,"size_decoded":2735,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"7142230af3d67038772771d5acbfeb6a","sha1":"77d4aab2cc72bcf831041133f6e9f3515cd8db27","sha256":"9ee27cad6a49d49855276bdd84fb4be1b184e633633beba323c1f3fd1edd4c37","sha512":"f336ae3d78c4b47a2aa90a24c40bc29208f97cca7db5a47745c20dc99dc6790f5aacaf6693188d2856646be69314bdefcc12390e87855928d3392c2ad2a81b48","ssdeep":"","tlshash":"6e51ae49b5f23048d763b2e8478f94016565a82f7c4a9959ba9cd2102f86c3cc2bffcc","first_seen":"2026-07-06T18:50:50.269812Z","last_seen":"2026-07-22T22:24:25.542021Z","times_seen":6,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/calendar.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.880Z","timestamp":1784757004880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/calendar.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1901\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-76d\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1901,"size_decoded":2154,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"065ddcf3595dfee645c05643d499ebc3","sha1":"02e88bf24aba6cbd5aa21d240f76dc0b5a9c1aea","sha256":"0254b887cc453d69fc73c4ead9791d4aa5f45cd06167c049f3f8d70a3f70ec99","sha512":"a085a10444cbba098b569451066e783f58bc3352b0de6bcce0d1d0cec4171b2dd70abe2edbce6e4d1307e3f70c4d4c7c7376fd15780b439619d918f6a2f498af","ssdeep":"","tlshash":"7641e0074d3b3221a533a0adcba75e50626615233406c6a9be8eeb481fca530c4af5ec","first_seen":"2026-07-06T18:50:50.280675Z","last_seen":"2026-07-22T22:24:25.547727Z","times_seen":6,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/main.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.899Z","timestamp":1784757004899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/main.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5097\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-13e9\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5097,"size_decoded":5351,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"77ffa5facd8833bcfd7f2dd0e6be9af7","sha1":"8d172f64d5e3e42d7c0950da786d57e1df3c7397","sha256":"6de5f1038aa3343463fbdd2540c78d33a962d9e4e8e77b832b88d49ee85176a5","sha512":"5727da06e97df1a14e52e7d48e0925938d4a8ddd32d3785e742a3dd273e9aadee60423f39a6362d408592b942bce618980c5f794334e1f5886d6becf188768d5","ssdeep":"96:qWNJL+x9WC98jANChzANF8f2TO7LoJOKZ4GdG8b1m7GfL/It82sia:qWNJu3ajZauoJ99L/It8Sa","tlshash":"02b1fd5b9afb12389577503a57cf6d5822370aa71109ce10feaf9e842f80c6814fb3d4","first_seen":"2026-07-06T18:50:50.308245Z","last_seen":"2026-07-22T22:24:25.546618Z","times_seen":6,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/namespace.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.859Z","timestamp":1784757004859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/namespace.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 70\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-46\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70,"size_decoded":320,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a3ee4665f7023a9246272a7b4e410fd7","sha1":"8b3ac2736a3c1b91be368d70c4353d1d572203d3","sha256":"e5f3a3973e94f1d360eab69fdcddf72e298ded6eac36b7ecb817cbad9a68114c","sha512":"6563aa7c7efda2f36f7901fd0e15b5bdc9520d3718f4c3c988ee9117d84322f35c7ad2129591ff6586eebb024f267ab06e3be2351ba18062c5979ad6ccba178b","ssdeep":"","tlshash":"dca002fcb42970ff836518a9fec27e68729502a0c3a65c114f482e7830d544ba1701d4","first_seen":"2026-07-06T18:50:50.289883Z","last_seen":"2026-07-22T22:24:25.526025Z","times_seen":6,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/schedule.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.873Z","timestamp":1784757004873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/schedule.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3798\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-ed6\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3798,"size_decoded":4051,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"cd7236e147ec23274ce3971edfc90fe8","sha1":"9e4b2bbe15bd21967215c49e1869147d7e480fed","sha256":"54fa33d3f07052a6ca5719100ef01b9a6da9eabe6028878ee3e696e90b6fa93c","sha512":"68d3147ee5254d3de05fb54801067b803a00227308b491af19a634558fd14530256e23f70a7746d17098c0e079eec2d5bed7a696c4722e548ebd1097cbb53ffe","ssdeep":"","tlshash":"9d71cf5e24f73226db63a07d0adb41aab276880b141acb08fdbd51413fc553cc66f668","first_seen":"2026-07-06T18:50:50.272932Z","last_seen":"2026-07-22T22:24:25.56615Z","times_seen":6,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/dom.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.867Z","timestamp":1784757004867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/dom.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 596\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-254\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":596,"size_decoded":848,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e9d107575cb1d8136d25d18305a28685","sha1":"0460187aad0a2d40d9dafdf4de0d409b4e779491","sha256":"a6bb40ca2db79bc302eb43b89b231966c54e3daa50f2e547796b8773a395fc05","sha512":"4495bda58872030ca1faca5ae181cd602f4be144c29022bb8196cefbd2ba27a4a2838eb74fa34dd542954c88ecbf0568a792bdf2c20d93ae13e09807a2ef543b","ssdeep":"","tlshash":"5df0a26f38a3303e412140be6fdb781c7f281521d4019a1a7e4c3a562ed1d6dc3b295c","first_seen":"2026-07-06T18:50:50.236335Z","last_seen":"2026-07-22T22:24:25.564985Z","times_seen":6,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/slots.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.876Z","timestamp":1784757004876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/slots.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2175\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-87f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2175,"size_decoded":2428,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e1f9bbb88891e2903028c0d46e3bcd1d","sha1":"22038a442d524e6f9ac59e82c0f049386319d62d","sha256":"6d501472caf60d30200a6d27c79bffc59881daa9dee05a0745118aa75f45755a","sha512":"b72380cd9ae3115796a94b5d6411a3dba28e235bdce8216f00e7fb49c0b0a2b0e80c1ba254bbbb9ad0e99233f8fd78b6d391dfee1f9169adfbcad5edc8e4b657","ssdeep":"","tlshash":"e7418b8b29bb2b3a9673507d47cb086610336d176609de05bb4f93042fc543c8ca67c8","first_seen":"2026-07-06T18:50:50.277467Z","last_seen":"2026-07-22T22:24:25.554368Z","times_seen":6,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/modal.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.886Z","timestamp":1784757004886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/modal.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3211\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-c8b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3211,"size_decoded":3464,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c3b9ca1beb25c625038b1b5518faac14","sha1":"125f9b81f143b25996a48e2ce13caba95f8fcb28","sha256":"28f23f01ba85145d22180622d6a480afb94f370bd1f7e3b37e2ea249c003e64e","sha512":"86442a648c8a15ea5356fe4a0d3cc404daf51e35d2a144987f10ccc7b78dd810ce1c016eab67d78ef6784d4f94404b67029e75aa7205b267715d18e852fd92fe","ssdeep":"","tlshash":"1261435b29bf2226de3304768fc71999133748176009c5b0ffeb81912fc2a04ad7798c","first_seen":"2026-07-06T18:50:50.245054Z","last_seen":"2026-07-22T22:24:25.529327Z","times_seen":6,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/storage.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.888Z","timestamp":1784757004888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/storage.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2675\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-a73\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2675,"size_decoded":2928,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ceffb82fc2eada8b56534d7fc1172977","sha1":"a14500663263f4215eaf1762c33fdc04929a11e3","sha256":"5c4f3c3340caf8606535c008a29c4eac730d4633dc2e37bc100815ff1adcf719","sha512":"c858a6212fc39d92915c59c453b8d28e8be5aaa00436bdc439d6e85d62cb88b22ce9f3c45de08305a8dd0e2da8f8dccf2de6818434daa878c1f3ad953c0b6c18","ssdeep":"","tlshash":"3a51cc4e70e7223ca33260ae4edf459551775e0b3217ca91f9de02023fc453c69a67aa","first_seen":"2026-07-06T18:50:50.258569Z","last_seen":"2026-07-22T22:24:25.532163Z","times_seen":6,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/auth.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.893Z","timestamp":1784757004893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/auth.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7603\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-1db3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7603,"size_decoded":7857,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"34f89d76b0b55b61704505917139985d","sha1":"8cbb3407fde3d689071d7b5c2ddd3efa84591cdd","sha256":"e10a12f5487f2a2f5166cb9aa3ce882e404f74654cb129583c04f46df15f9103","sha512":"db2815b38f60af20c440940aa0e375d4906d8d5745621fa366dc562a84a07f95811dcbc52bf9f61b4ec2d0fd8906bb6a1312d22857c197b14d9002e9c33a26fd","ssdeep":"192:sPoREfCQ67sfixeuyAPs7ywwUwJNuWQSnGcv46/FKaTwF1EmqGcu/Gc8imAmrDjJ:swREI0eJN1BUc","tlshash":"7cf1410a9477223eda7710b61fcb14462372454b2409ce91f6ed43452fc8e2ebe67be8","first_seen":"2026-07-06T18:50:50.298132Z","last_seen":"2026-07-22T22:24:25.545414Z","times_seen":6,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/info.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.897Z","timestamp":1784757004897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/info.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 512\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-200\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":512,"size_decoded":764,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6b863247c220816ae01ba2d4ba08d1bc","sha1":"b3655bd73cca7cebc38621f3340c7c3f84ed4427","sha256":"0cba3b209a2d2e68308b2e57533d23256b19be6647bada8e2fbac9a7ff26c074","sha512":"52420951fcefe6107dd64ec02a3014791720185f20e781adfe782a47d8f15687fbe37772b2ed34318bb0949d4405e88a8da5fa48aa4efb688edb94254321d3fb","ssdeep":"","tlshash":"1ef0b4efcd7aa23379731ea60ae76a5c1a31077f4149c600bb2692440ea66113c135bc","first_seen":"2026-07-06T18:50:50.30649Z","last_seen":"2026-07-22T22:24:25.561688Z","times_seen":6,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/api/health","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:05.058Z","timestamp":1784757005058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/api/health HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:05 GMT\r\ncontent-type: application/json\r\ncontent-length: 112\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112,"size_decoded":409,"mime_type":"application/json","magic":"JSON text data","md5":"c55108b74ca503b9a01b9c3519126724","sha1":"7702f112d298f68799af267bc24517a9fa9fee86","sha256":"40fc9778a63b86bad41ed9eecc14b58066599f6198413a1b0d2b2f46e72d9ffb","sha512":"2819a29af57bea6a1adb1631fc703018d9caa6fb8be49f056737ccbcc5135c35af988d8adf6b537e01ba92f8bfc8a975c9d623726974d528d320b951a28bf212","ssdeep":"","tlshash":"ddb0128023a2e8308c00830092c03e9dafdf7c95c2155ad5158c5a1407303fb09f0135","first_seen":"2026-07-22T21:46:10.723045Z","last_seen":"2026-07-22T22:24:25.563046Z","times_seen":5,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/cache.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.871Z","timestamp":1784757004871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/cache.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 893\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-37d\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":893,"size_decoded":1145,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"2d42680c35696e9aa53949fb4e41ecaf","sha1":"8684bb427fc9e798f18c3d3fb9926e875c0137f4","sha256":"8467196b02fe3bad30f2dddb610acd507ad8c134392522bf59bc84518c631fae","sha512":"e16e555662607c7f2e61d17243da2a50b3b1d48bf88afd86cb7d9244d3d8bf39b07d70a61baaa238df8267304768e2b4b092f0b8d3cad042c1abddb00e31209a","ssdeep":"","tlshash":"f4118c5976fb31194272b0bc0bdf40456525d143a60eef50ba9e83023f9853ca766b5d","first_seen":"2026-07-06T18:50:50.322536Z","last_seen":"2026-07-22T22:24:25.558981Z","times_seen":6,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/favicon.png","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.904Z","timestamp":1784757004904,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/favicon.png HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 22254\r\nlast-modified: Fri, 03 Jul 2026 02:08:34 GMT\r\netag: \"6a4719a2-56ee\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22254,"size_decoded":22496,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b1505175dfb013552361a3cce3afb90e","sha1":"65e195383803a248f4ba065013bd69b7cab41c44","sha256":"260067382323ed52661bd79f4fa22edee49175d0d5b1cfc96cdc28eabbea159a","sha512":"fe49dbeee4eb00c9af7489a5bf814c997e9979daaa42dd858b32146586e3353dce263396fcd6f22557e777d0580936d42cdf702b384fe5282d58082534a6225c","ssdeep":"384:UyJgtTrrrJzDCZ8TtaqC60ZneUgMdPAmCLfU14hShUx2iPKkY:JgtTXrhN/C5ReUvdom0bhSh2PKkY","tlshash":"53a2f12f4ca87caa807c1f2c768ecf7599620186dd4ad90eff36d0460c7847ead9b056","first_seen":"2023-05-02T17:57:03Z","last_seen":"2026-07-22T22:24:25.549959Z","times_seen":3873,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/favicon.png","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:05.033Z","timestamp":1784757005033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/favicon.png HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 22254\r\nlast-modified: Fri, 03 Jul 2026 02:08:34 GMT\r\netag: \"6a4719a2-56ee\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":22254,"size_decoded":22496,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b1505175dfb013552361a3cce3afb90e","sha1":"65e195383803a248f4ba065013bd69b7cab41c44","sha256":"260067382323ed52661bd79f4fa22edee49175d0d5b1cfc96cdc28eabbea159a","sha512":"fe49dbeee4eb00c9af7489a5bf814c997e9979daaa42dd858b32146586e3353dce263396fcd6f22557e777d0580936d42cdf702b384fe5282d58082534a6225c","ssdeep":"384:UyJgtTrrrJzDCZ8TtaqC60ZneUgMdPAmCLfU14hShUx2iPKkY:JgtTXrhN/C5ReUvdom0bhSh2PKkY","tlshash":"53a2f12f4ca87caa807c1f2c768ecf7599620186dd4ad90eff36d0460c7847ead9b056","first_seen":"2023-05-02T17:57:03Z","last_seen":"2026-07-22T22:24:25.549959Z","times_seen":3873,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/app-config.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.865Z","timestamp":1784757004865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/app-config.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1636\r\nlast-modified: Fri, 10 Jul 2026 11:21:05 GMT\r\netag: \"6a50d5a1-664\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1636,"size_decoded":1889,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"fdf8a7afd1aa8583841bff21821c1b27","sha1":"2f850cbc97229e799d31e483519cad0551253288","sha256":"f05dd93611aaa3d2313dfd8d49b03216dea29631b0025e9c5d6241be8e59e78f","sha512":"47dee89cb3debc2a6a0477b91193106740841c9fd71ddbbc5b526ee73f9cd20830e0fe4813e730334503ad8f3d9152358812bbe6dca46d44c36470730532f3bf","ssdeep":"","tlshash":"ba3141e3c430c4a591b267761757b05a9a3107838d897cb6b75e0f141f8ca1d30b2672","first_seen":"2026-07-22T21:46:10.718433Z","last_seen":"2026-07-22T22:24:25.527836Z","times_seen":5,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/metrics.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.891Z","timestamp":1784757004891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/metrics.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 934\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-3a6\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":934,"size_decoded":1186,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f399ba9cb60b163963d3fae5f327d18c","sha1":"0c0ad029e071cf0b60f5814a26b8a9b5271e9586","sha256":"dde07a408391d40768fe0f34efa56d3a2513a3312af42a00d859d52c114a5682","sha512":"5046821f8f8c1ceea0acb18bc7b91986cc1093fb7b08bef23b0cf11bd77d56f2755a128614b7ca3c9312b9f92cdc9ab6d12ef0eb479ba12d86739b1a479ad602","ssdeep":"","tlshash":"c911c05ac0f6713259e7a15d9b9b844121274c872c4fb880bf9c47901f8915d9d71a8c","first_seen":"2026-07-06T18:50:50.340655Z","last_seen":"2026-07-22T22:24:25.563811Z","times_seen":6,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/api/slots?start=2026-07-22\u0026end=2026-09-20","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:05.306Z","timestamp":1784757005306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/api/slots?start=2026-07-22\u0026end=2026-09-20 HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:05 GMT\r\ncontent-type: application/json\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":113606,"size_decoded":113882,"mime_type":"application/json","magic":"JSON text data","md5":"eb7b5cbad858a8e99f3bc0045c6f702f","sha1":"fbc3ffb43dde6bf99ddd304fb7c4831aa6eaabad","sha256":"feeb44636e5941f54aae3d501f3c29713e7f1d12569b8d499087ce55b0b42eaf","sha512":"54264cfb83ef411ec41f501eedd038063a563e5cfa01e15b2d7eb78ca951c025cd132b52fc5f934912e6feb36b03b420bd9ee354f9d519d510fac131722c4808","ssdeep":"192:vp9lZ5dF5xVlpRlF1FttFhJpJ11ttZZtZBl1ZJ1VxpdVcGzBdFt1FdNxZxxlNNVG:IGsEjZHvZw41hFtvc","tlshash":"02b3dac782e3d8b65d8229e87d1c7f1d5361770775edae8ae38e5d0806882feb436406","first_seen":"2026-07-22T21:46:10.73463Z","last_seen":"2026-07-22T22:24:25.557176Z","times_seen":5,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T21:50:04.413Z","timestamp":1784757004413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 178\r\nlocation: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":7,"connect":43,"send":0,"wait":43,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/css/main.css","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.855Z","timestamp":1784757004855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/css/main.css HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 29808\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-7470\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29808,"size_decoded":30049,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"b294c84c0c8f9e71f37f62f18c69bdbc","sha1":"99e7224d7441b65d10748c262700720671743038","sha256":"a37c00867607fd5c1c22d7559a7f1dca63ace6555ca7b7fef62f7b6f8cdb2983","sha512":"7a01b2955cf69faf7e0361fc9b9d9be795227b017aeae3b2a7bae03ed1fb67265261f5b350b2a0c203c26c9de9cb2ce652d059e4736686f37d27e98ed9b2b9ec","ssdeep":"384:BRsiVIZF4ZmP4CrbLuGPI7Ej3cfxe7CaMk:HsiVIZFYmP4Crbtj3cBaMk","tlshash":"c9d21e20e60669867036e7b8bfa34a4ef3965057c202423e7fd4e3544fb6268c665fdc","first_seen":"2026-07-06T18:50:50.233152Z","last_seen":"2026-07-22T22:24:25.53397Z","times_seen":6,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/api.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.869Z","timestamp":1784757004869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/api.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1689\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-699\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1689,"size_decoded":1942,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"85db59f20682524c860166cfcf3c4bd9","sha1":"d4a2e810787df8604e89e2e6953a58558422cee0","sha256":"19b9e52f165387c613feb250002f2d9825995464c5c2bc1a1c180243e063f320","sha512":"0b89a7fc1b95ed71be834801988234622c3f02843120d3468c3a6db53518a2bac55a9670ab5b35c31f73fc50e7d6734461aa1257e1e0dd108537f156d03f0070","ssdeep":"","tlshash":"6331cfcd74e3b05d43a231ad1acf6018f42ae852150fd991f96d82a07f5083da677b8c","first_seen":"2026-07-06T18:50:50.304895Z","last_seen":"2026-07-22T22:24:25.536723Z","times_seen":6,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/times.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.882Z","timestamp":1784757004882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/times.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1387\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-56b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1387,"size_decoded":1640,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a6732fda0c6eaebd67d94f4349100e10","sha1":"8bb4ff203688aeda66ece0014b7f456b8c0509e4","sha256":"1d12064ba5aa2ae303bd97944ef664e5dbf3f8bc4d1fd68f033923e685a67758","sha512":"b551255b71e6fd2314fc046ddc95f30e5256ce2bf0c4e3b61b87447c92f9b84696331c82954dc0d1a634bb9d2d5d5691ae2be93af752139022fd2dc68e279604","ssdeep":"","tlshash":"1121238e65bb217a5477006b43db48e1d71a85071807c250fedd86482f80e3ae8dff99","first_seen":"2026-07-06T18:50:50.32517Z","last_seen":"2026-07-22T22:24:25.543803Z","times_seen":6,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stage3.wpengine-bestbidestimating.com/calendly/assets/js/branding.js","fqdn":"stage3.wpengine-bestbidestimating.com","domain":"wpengine-bestbidestimating.com","tld":"com"},"ip":{"addr":"103.101.85.123","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stage3.wpengine-bestbidestimating.com/calendly/","date":"2026-07-22T21:50:04.890Z","timestamp":1784757004890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stage3.wpengine-flowpressousa.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 16:05:16 GMT","end":"Sat, 19 Sep 2026 16:05:15 GMT"},"fingerprint":{"sha1":"4B:67:68:EA:3D:CE:D4:2E:A6:BE:85:58:D3:52:2E:67:D0:FC:B8:16","sha256":"10:C7:9E:4B:D4:F5:20:98:33:A0:19:BA:81:40:6B:FD:41:67:00:E4:08:8E:1E:18:6D:7F:AA:F7:89:1A:43:8C"}}},"request":{"raw":"GET /calendly/assets/js/branding.js HTTP/1.1\r\nHost: stage3.wpengine-bestbidestimating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stage3.wpengine-bestbidestimating.com/calendly/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 22 Jul 2026 21:50:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2728\r\nlast-modified: Fri, 03 Jul 2026 02:08:27 GMT\r\netag: \"6a47199b-aa8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2728,"size_decoded":2981,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"aacbbc5773b6280d84a27ffb66639b1d","sha1":"55811ffe4f6917aa65908728fecac1c393e2fad6","sha256":"ecfbd145532ef96cdd65b1ade8641f927440e2f536fdf1a9c75bcc64f987080c","sha512":"0a927f5489e5c2709e29ecde306baeb8f12aa2ddf866e66078722ca7c7845cd00bb0e043c506d4b5a993a17c9e4115880498fe7d73e23bef2b23e9cfa3a1c12f","ssdeep":"","tlshash":"86519aec58e3b029436320fcd79fa258b43a85037a49de857d4d4310af6593ac9a27dc","first_seen":"2026-07-06T18:50:50.335322Z","last_seen":"2026-07-22T22:24:25.555155Z","times_seen":6,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"stage3.wpengine-bestbidestimating.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}